CVE-2019-13103
HighSummary
A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, leading to uncontrolled stack growth and eventually crashing or overwriting other data.
Risk Assessment
Organizations may experience system crashes or data loss, potentially leading to downtime and service availability issues.
Recommendation
It is recommended to update to the latest version of Das U-Boot to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Das U-Boot
See all- CVE-2024-57258High
Integer overflows in memory allocation in Das U-Boot before version 2025.01-rc1 occur for a crafted squashfs filesystem. These issues can arise during the use of sbrk, request2size, or due to mishandling of ptrdiff_t on x86_64 architecture.
- CVE-2024-57256High
An integer overflow in ext4fs_read_symlink in Das U-Boot before version 2025.01-rc1 occurs during memory allocation for an ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and memory overwrite.
- CVE-2022-30790High
Das U-Boot version 2022.01 has a Buffer Overflow vulnerability, which is different from the issue described in CVE-2022-30552.
- CVE-2020-10648High
Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration.
- CVE-2019-13106High
Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution.
- CVE-2019-13104High
In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data, including the whole stack, while reading a crafted ext4 filesystem.
- CVE-2022-34835Critical
In Das U-Boot through version 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the 'i2c md' command enables the corruption of the return address pointer of the do_i2c_md function.
- CVE-2019-14204Critical
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_umountall_reply.
- CVE-2019-14203Critical
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_mount_reply.
- CVE-2019-14202Critical
An issue was discovered in Das U-Boot through 2019.07 related to a stack-based buffer overflow in the nfs_readlink_reply helper function.
Original NVD description (English source)
A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data.